-
Waze
· Waze Privacy Policy
The policy states that account deletion requests trigger a process that generally takes approximately two months to complete, during which data may remain in backup systems, and that delays may occur due to maintenance or technical issues....
Why it matters: This provision establishes the operational timeline for data deletion following an account deletion request, disclosing that full deletion from storage systems may take up to approximately two months and that the stated timeline is subject to operational delays....
-
Waze
· Waze Privacy Policy
The policy states that Waze collects voice files when users record their voice or use voice command features, and that if users choose to share voice recordings, other users may download and use them, after which Waze states it may have no control over those files....
Why it matters: This provision establishes that voice and audio data is collected during voice feature use, and that shared voice recordings may be downloaded and used by third parties outside Waze's control....
-
Waze
· Waze Privacy Policy
The policy states that advertising-related data processing is conducted on the basis of legitimate interests, including the interests of third-party advertising partners, with reference to unspecified safeguards applied to protect privacy....
Why it matters: This provision identifies legitimate interests, including those of third-party advertisers, as a legal basis for processing that supports the advertising model, which is a basis that requires a documented balancing test under GDPR and may be subject to user objection rights....
-
Waze
· Waze Privacy Policy
The policy discloses that user data may be processed on servers outside the user's country of residence, and states that Waze applies consistent protections regardless of processing location....
Why it matters: This provision establishes that cross-border data transfers occur, including to servers in the EU and U.S. as noted elsewhere in the policy, but does not specify the transfer mechanisms relied upon for compliance with GDPR Chapter V or equivalent frameworks....
-
Waze
· Waze Privacy Policy
The policy states that Waze collects data about user activity on third-party sites and apps that are linked to a Waze account or accessed through the Waze service....
Why it matters: This provision establishes that data collection extends beyond Waze's own platform to include activity on third-party services accessed through or linked to Waze, the scope of which depends on which third-party integrations a user activates....
-
These provisions have changed before
Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
-
Waze
· Waze Privacy Policy
The policy states that users in the EU, UK, Israel, and Brazil have rights to access, update, correct, delete, restrict, and export their data, and to object to processing, with requests submitted to privacy@waze.com....
Why it matters: This provision establishes the operational mechanism for exercising data subject rights under GDPR, UK GDPR, Israeli data protection law, and LGPD, including the contact point and the data export process available through the Waze website dashboard....
-
TikTok Ads
· TikTok Advertising Policies
The policy index identifies a dedicated article governing advertising in the housing, employment, and credit categories, which typically restricts audience targeting practices that could constitute discriminatory ad delivery based on protected characteristics....
Why it matters: This provision establishes a separate policy category for HEC advertising that corresponds to obligations under civil rights statutes including the Fair Housing Act and Equal Credit Opportunity Act; non-compliance with HEC targeting restrictions carries both platform enforcement and regulatory exposure....
-
TikTok Ads
· TikTok Advertising Policies
The policy index references a standalone Data Collection Standards article governing data collection practices by advertisers in connection with TikTok advertising campaigns....
Why it matters: This provision establishes that advertiser-side data collection connected to TikTok campaigns is subject to platform-imposed standards, which may include consent requirements, permitted data types, and data handling obligations that operate alongside applicable privacy law....
-
TikTok Ads
· TikTok Advertising Policies
The policy index identifies a dedicated Teen Safety and Wellbeing article governing advertising restrictions applicable to content or targeting involving younger audiences on TikTok....
Why it matters: This provision establishes a separate policy category addressing advertising to or involving teen users, which may restrict content categories, targeting parameters, and advertiser eligibility for campaigns that reach users under a specified age threshold....
-
TikTok Ads
· TikTok Advertising Policies
The policy index references a Branded Content Policy article with market-specific requirements, governing disclosure and compliance obligations applicable to sponsored or paid-partnership content on the TikTok platform....
Why it matters: This provision establishes that branded content disclosure obligations vary by market, meaning advertisers and creators operating across multiple geographies are subject to jurisdiction-specific disclosure requirements that must be assessed on a market-by-market basis....
-
TikTok Ads
· TikTok Advertising Policies
The policy index references a standalone Advertiser Account Policy article governing the eligibility conditions and operational requirements that apply to advertiser accounts on TikTok's advertising platform....
Why it matters: This provision establishes the account-level policy framework governing advertiser eligibility, account standing, and enforcement actions including campaign disapproval and account suspension, which directly affects advertisers' access to TikTok's advertising infrastructure....
-
TikTok Ads
· TikTok Advertising Policies
The policy index references an article establishing certificate or documentation requirements for advertisers in regulated industries operating in Southeast Asia (SEA) and Northeast Asia (NEA) markets....
Why it matters: This provision establishes that advertisers in regulated industries targeting SEA and NEA markets must meet additional pre-approval documentation requirements as a condition of campaign eligibility, creating a market-specific operational requirement beyond standard advertiser onboarding....
-
TikTok Ads
· TikTok Advertising Policies
The policy index identifies a dedicated Financial Services article governing eligibility requirements, content restrictions, and permissible advertising practices for financial products and services on TikTok's platform....
Why it matters: This provision establishes a separate policy category for financial services advertising, which typically includes eligibility verification, product-type restrictions, and disclosure requirements that affect which financial advertisers and products may run campaigns on TikTok....
-
TikTok Ads
· TikTok Advertising Policies
The policy index references a dedicated article on Regional Self-Regulatory Ad Codes applicable to the European Union, governing compliance with EU-level advertising self-regulatory standards for advertisers targeting EU audiences on TikTok....
Why it matters: This provision establishes that EU-market advertising on TikTok is subject to regional self-regulatory codes in addition to TikTok's global advertising policies, creating a layered compliance framework for advertisers targeting EU audiences....
-
Uniswap
· Uniswap Terms of Service
The agreement requires users to resolve disputes with Uniswap Labs through individual binding arbitration rather than through court litigation, and waives users' ability to participate in class action proceedings....
Why it matters: This provision establishes that all disputes must proceed through individual arbitration, which is administered outside of the court system, and forecloses class action participation; the enforceability of these terms may vary by jurisdiction and claim type, and applicable consumer protection statutes in certain states may limit their scope....
-
Uniswap
· Uniswap Terms of Service
Users who post any content through the Products grant Uniswap Labs a worldwide royalty-free license to use, copy, modify, and display that content for business purposes; users who submit suggestions or feedback separately grant a perpetual, irrevocable, transferable, sublicensable license to use that material and create derivative works for any purpose....
Why it matters: The feedback and suggestions license is perpetual, irrevocable, and extends to derivative works for any purpose, meaning Uniswap Labs retains rights to submitted feedback even after a user discontinues use of the Products; enterprise users with IP governance policies should evaluate whether this license scope is compatible with their internal content and innovation policies....
-
Uniswap
· Uniswap Terms of Service
The agreement states that Uniswap Labs does not owe fiduciary duties to users and that any such duties that might otherwise exist at law or in equity are waived and eliminated to the fullest extent permitted by law....
Why it matters: This provision attempts to contractually disclaim and waive all fiduciary duties, including those that might otherwise arise at equity; the enforceability of such waivers depends on applicable law, regulatory classification of the Products, and jurisdiction, and the qualifier 'to the fullest extent permitted by law' preserves the possibility that certain duties may remain operative in specific contexts....
-
Uniswap
· Uniswap Terms of Service
The agreement places full responsibility on users to determine and comply with all applicable laws, regulations, KYC requirements, transfer restrictions, and tax obligations in their jurisdiction, regardless of whether those restrictions are technically enforced at the protocol level....
Why it matters: This provision establishes that users bear sole legal and tax compliance responsibility for all transactions conducted through the Products, including in jurisdictions where asset trading may be restricted or regulated; this allocation of compliance responsibility does not itself determine how regulators may characterize the obligations of Uniswap Labs, and users operating in regulated markets should independently assess their compliance posture....
-
Uniswap
· Uniswap Terms of Service
The agreement states that Uniswap Labs is not a broker, intermediary, agent, advisor, seller, underwriter, or issuer in connection with any Continuous Clearing Auction, does not conduct due diligence on tokens or Token Teams, and disclaims all warranties regarding token accuracy, price, or ongoing liquidity....
Why it matters: This provision disclaims Uniswap Labs' role in CCA token distributions in terms that parallel the characterizations relevant to securities law analysis; whether these disclaimers are sufficient to establish regulatory classification is a legal determination that depends on the specific facts and applicable law, and is not determined by the contractual language alone....
-
Uniswap
· Uniswap Terms of Service
The agreement excludes Uniswap Labs' liability for indirect, punitive, incidental, special, consequential, and exemplary damages, including loss of profits, data, goodwill, and other intangible property, arising from use of or inability to use the Products or any Third-Party Services, including losses resulting from hacking or unauthorized access....
Why it matters: This limitation of liability provision excludes categories of damages that may be most relevant to losses experienced in digital asset trading contexts, including loss of cryptocurrency, data, and profits; applicable law in certain jurisdictions may limit the enforceability of such exclusions for consumer claims, and the provision's breadth should be evaluated in light of applicable consumer protection statutes....
-
Uniswap
· Uniswap Terms of Service
The agreement states that use of the AI-powered Support Chatbot constitutes consent to processing of queries and interactions for support and service improvement purposes, and that Uniswap Labs may retain conversation transcripts for quality assurance and product development....
Why it matters: This provision establishes that interaction with the Support Chatbot constitutes consent to data processing and retention, and the agreement explicitly advises against submitting confidential, personal, or sensitive information through the chatbot; the scope of retention and the applicable Privacy Policy terms should be evaluated together to assess the full data processing framework....
-
Uniswap
· Uniswap Terms of Service
The agreement reserves Uniswap Labs' sole discretion to modify the terms at any time, with notice provided only by updating the date and posting a current version at the stated URL; continued use of any Product after posting constitutes acceptance of the modified terms....
Why it matters: This provision establishes that continued use of any Product following a terms update, regardless of whether the user actively reviewed the changes, constitutes binding acceptance; the notice mechanism relies on users proactively checking the terms URL or the document date rather than direct notification to users....
-
Uniswap
· Uniswap Terms of Service
The agreement reserves Uniswap Labs' right to revoke user-claimed subdomains and usernames at its discretion and without notice, including for terms violations, unlawful behavior, conduct that harms the service, offensive names, or to comply with legal requirements....
Why it matters: This provision establishes that username access can be revoked without notice at Uniswap Labs' discretion, including for subjective criteria such as names deemed offensive; users whose wallet identity and public profile are associated with a subdomain should be aware that this association can be administratively terminated without prior notification....
-
Uniswap
· Uniswap Terms of Service
Users agree to indemnify, defend, and hold harmless Uniswap Labs and its affiliates, officers, directors, employees, agents, and service providers from all claims, damages, costs, and expenses (including attorney's fees) arising from the user's access to or use of the Products, violations of the agreement, third-party access via the user's account, and disputes involving the user's own customers....
Why it matters: This indemnification provision extends to claims arising from third-party access to the Products using the user's account or device, and to disputes between the user and their own customers, which may create indemnification exposure for enterprise users beyond their direct use of the Products....
-
BeReal
· BeReal Terms of Service
When users share content publicly on BeReal, they grant BeReal a worldwide, royalty-free, and sublicensable licence to use, copy, reproduce, process, adapt, modify, publish, transmit, display, and distribute that content across any media or distribution method, without additional payment beyond access to the service....
Why it matters: This provision establishes the scope of rights BeReal holds over publicly posted user content, including sublicensing rights that permit third-party distribution. The assertion that app access constitutes sufficient compensation for this licence may require evaluation under applicable consumer contract fairness standards in the EU and UK....
-
BeReal
· BeReal Terms of Service
Content shared only with friends on BeReal is not automatically licensed to BeReal for commercial use; users may voluntarily opt in to grant BeReal a licence to use friends-only content for communication, commerce, and marketing purposes....
Why it matters: This provision establishes a separate, opt-in consent mechanism for commercial use of private friend-circle content, distinguishing it from the automatic licence granted for publicly shared content. The adequacy of the opt-in mechanism under GDPR consent standards, particularly the requirements of freely given, specific, informed, and unambiguous consent, warrants review....
-
BeReal
· BeReal Terms of Service
The agreement designates Paris courts and French law as the exclusive forum and governing law for all disputes, subject to a carve-out where this is prohibited by the user's local law....
Why it matters: This provision requires disputes to be submitted to Paris courts under French law, with a conditional carve-out for jurisdictions where mandatory local law prohibits such clauses. For users in the EU, UK, US, and other jurisdictions with mandatory consumer forum or governing law protections, the practical effect of this clause may be limited by applicable law....
-
BeReal
· BeReal Terms of Service
Account creation paired with phone number submission constitutes consent to receive SMS messages from BeReal, including promotional messages sent via automated systems, which the agreement states may be sent at any time to the extent permitted by local law. Users may withdraw promotional SMS consent via account settings or by replying STOP....
Why it matters: This provision bundles promotional SMS consent into the account creation process rather than soliciting it as a standalone, specific opt-in. In the US, the TCPA requires prior express written consent for automated promotional text messages, and the adequacy of bundled consent obtained through general terms acceptance warrants review against TCPA regulatory guidance and FCC rules....
-
BeReal
· BeReal Terms of Service
BeReal may suspend accounts for 30 days upon sharing unauthorized content, with permanent suspension after three such incidents; certain severe content violations result in immediate and permanent account suspension and a ban on creating new accounts. Users may contest suspensions by contacting customer support....
Why it matters: This provision establishes the enforcement mechanism for content policy violations, including a structured escalation process and an unconditional permanent ban on account creation following permanent suspension. The contestation mechanism is limited to contacting customer support, with no specified timeline, escalation path, or independent review procedure described in the document....
-
BeReal
· BeReal Terms of Service
BeReal reserves the right to permanently delete accounts after two years of continuous inactivity for European and non-US users, or after three years for US-based users, calculated from the date of last login. BeReal may send an SMS notification prior to deletion, giving users the opportunity to log in and retain their account....
Why it matters: This provision establishes region-differentiated inactivity deletion thresholds, with a shorter period for European users that the document attributes to legal data protection obligations, consistent with GDPR data minimization and storage limitation principles. Deletion is stated to be permanent, and the prior notification is described as an SMS that BeReal may (not must) send....
-
BeReal
· BeReal Terms of Service
The agreement sets a minimum age of 13 for all users and requires parental or guardian consent for users who have not reached the applicable age of consent in their country of residence....
Why it matters: This provision establishes jurisdiction-dependent parental consent obligations, which engage COPPA for US users under 13, GDPR Article 8 for EU users below the applicable national digital consent age (ranging from 13 to 16 across EU member states), and equivalent national frameworks. The document does not specify the mechanism by which parental consent is obtained or verified....
-
BeReal
· BeReal Terms of Service
The agreement limits BeReal's liability, including that of its affiliates, officers, directors, employees, agents, and licensors, to the maximum extent permitted by the applicable law of the user's country of residence....
Why it matters: This provision asserts a broad liability cap covering BeReal and an extensive list of associated entities, subject to the limits of applicable local law. The provision does not specify a monetary cap or enumerate excluded categories of harm, instead delegating the effective limit to local law, which produces jurisdiction-dependent outcomes....
-
BeReal
· BeReal Terms of Service
BeReal reserves the right to update the user agreement at any time, with advance notice required only for changes that affect rights or obligations (except for security or compliance-driven updates). Continued use of the service after the effective date constitutes acceptance of the updated terms....
Why it matters: This provision establishes continued use as the mechanism for accepting updated terms, with the notification obligation conditioned on the materiality of the change and subject to security and compliance exceptions. The 'reasonable time' notification standard is not defined in the document....
-
ADP
· ADP Privacy Statement
The policy authorizes ADP to process biometric data including fingerprints for asset protection, site and system access, security, and fraud prevention purposes without requiring prior explicit consent for these listed uses....
Why it matters: This provision authorizes biometric data processing — a category subject to heightened regulatory requirements under statutes such as the Illinois Biometric Information Privacy Act — for enumerated business purposes under the BCR framework, with prior explicit consent required only for uses beyond those listed categories....
-
ADP
· ADP Privacy Statement
The policy authorizes ADP to process criminal records data and data relating to criminal behavior or proceedings for due diligence, security, and compliance purposes....
Why it matters: This provision authorizes processing of criminal records data — classified as a special category under GDPR — for due diligence and security purposes, which may engage fair credit reporting and background check statutes in the United States depending on the context and method of collection....
-
ADP
· ADP Privacy Statement
The policy authorizes ADP to share personal data including bank account information with business partners in the context of referral validation and related commercial transactions, subject to the condition that the individual has purchased from, interacted with, or authorized sharing with that partner....
Why it matters: This provision authorizes disclosure of bank account information to third-party business partners for referral validation purposes, which may engage financial data protection requirements under the Gramm-Leach-Bliley Act and applicable state financial privacy statutes depending on the nature of the business relationship....
-
ADP
· ADP Privacy Statement
ADP has adopted EU-approved Binding Corporate Rules as the legal mechanism governing cross-border transfers of personal data among ADP Group Companies worldwide, including transfers to entities outside the EU and EEA....
Why it matters: The BCR framework establishes the legal basis for ADP's cross-border personal data transfers under GDPR and UK GDPR, covering data flows across ADP's operations in more than 140 countries. The document states that ADP extended its BCR definition to include the UK following Brexit by decision of its General Counsel....
-
ADP
· ADP Privacy Statement
The policy establishes procedures for individuals to request access to, correction of, or deletion of their personal data, and to object to processing, either through their online account or by contacting privacy@adp.com. For EEA individuals, additional rights including data portability and rights regarding automated decision-making are also stated....
Why it matters: This provision establishes the operational mechanism through which individuals may exercise data rights under GDPR, UK GDPR, CCPA, and the ADP BCR framework. EEA individuals have an additional right of data portability and notification regarding automated decision-making, with a dedicated EMEA Data Protection Officer contact provided....
-
ADP
· ADP Privacy Statement
The policy discloses that third-party advertising companies place cookies on user devices for targeted advertising across ADP and other websites, while stating these companies do not collect personal data in this process. The policy also states that ADP websites do not recognize browser Do Not Track signals....
Why it matters: The disclosure that ADP websites do not recognize Do Not Track signals may engage applicable state privacy requirements, including California's requirement under the California Online Privacy Protection Act (CalOPPA) to disclose how a site responds to Do Not Track signals. The policy provides an opt-out mechanism via the NAI and a third-party opt-out URL....
-
ADP
· ADP Privacy Statement
The policy authorizes processing of racial or ethnic data for supplier diversity programs, physical or mental health data for disability accommodation and emergency health needs, and religious beliefs data for accommodation purposes such as dietary and holiday requests, without requiring prior explicit consent for these listed uses....
Why it matters: Processing of racial or ethnic origin, health, and religious beliefs data constitutes processing of special categories of personal data under GDPR Article 9, requiring an explicit legal basis such as explicit consent, vital interests, or other Article 9(2) grounds. The policy states prior explicit consent is required only for uses outside the listed categories, while asserting these enumerated uses are covered under the BCR framework....
-
ADP
· ADP Privacy Statement
The policy states that personal data is retained only as long as necessary for stated business purposes, legal compliance, or applicable statutes of limitations, following ADP's Global Records Information Management Policy, and is securely deleted, destroyed, de-identified, or archived at the end of the retention period....
Why it matters: The retention framework references ADP's internal Global RIM Policy and records retention schedules as the governing mechanism, but those schedules are not published or disclosed in this document. The stated disposal methods include archiving as an alternative to deletion, which may affect the practical exercise of erasure rights....
-
Grindr
· Grindr Privacy Policy
The policy discloses that users may provide health information including HIV and vaccination status, racial or ethnic origin, and other sensitive data through their public profiles, and that this information is processed to provide the Services including AI-driven personalization features....
Why it matters: This provision establishes that Grindr processes GDPR Article 9 special-category data, including health data and racial or ethnic origin, as part of its core service delivery and AI personalization functions, requiring a valid Article 9 legal basis for each processing purpose....
-
Grindr
· Grindr Privacy Policy
The policy states that withdrawing consent applies only to future processing and that following an opt-out, sensitive or special-category data may continue to be processed where permitted under applicable law....
Why it matters: This provision establishes a carve-out permitting continued processing of sensitive data after user opt-out under legal bases other than consent; the scope of those alternative legal bases is not enumerated in this clause, creating compliance questions regarding which processing purposes may continue without consent....
-
Grindr
· Grindr Privacy Policy
The policy states that Grindr retains device identifiers (IDFV and Android ID) and limited log information for up to two years after account deletion for internal reporting, metrics, and statistics purposes, separate from the general 28-day deletion timeline....
Why it matters: This provision establishes that device identifiers linked to deleted accounts are retained for up to two years, which may engage data minimization and storage limitation obligations under GDPR Article 5 and equivalent frameworks, and requires assessment of whether internal reporting and metrics constitute a lawful basis for retention of identifiers associated with deleted user accounts....
-
Grindr
· Grindr Privacy Policy
The policy authorizes use of sensitive personal information, including special-category data, to power AI-driven features (branded 'gAI') for personalization, recommendations, behavior-based profile insights, personalized chat prompts, and compatibility-based profile recommendations....
Why it matters: This provision establishes that sensitive personal information, including health data and other special-category fields, is processed by AI systems for personalization and recommendation purposes; the policy states consent is the legal basis for this processing where required, and users may withdraw consent via in-app Privacy Settings....
-
Grindr
· Grindr Privacy Policy
The policy authorizes sharing of personal information with advertising and marketing partners to facilitate advertising experiences, and permits Grindr and its partners to use cookies, pixels, and similar technologies to collect cross-site browsing data for targeted advertising on and off the Grindr platform....
Why it matters: This provision establishes that personal information including device identifiers, advertising identifiers, and browsing activity may be shared with advertising and marketing partners and that cross-site data collection is conducted for targeted advertising purposes; the policy states users may opt out via the in-app Consent Preference Center, website footer link, or third-party opt-out tools....
-
Grindr
· Grindr Privacy Policy
The policy discloses that in certain jurisdictions, Grindr may require users to submit a video selfie or pair a video selfie with an official photo ID for age verification purposes, and explicitly states this process involves processing biometric information....
Why it matters: This provision establishes that biometric data may be collected from users in certain jurisdictions as a condition of account creation for age verification; the specific jurisdictions where this requirement applies are not enumerated in this clause, and the policy does not specify the biometric data retention period in this section....
-
Grindr
· Grindr Privacy Policy
The policy discloses that Grindr collects precise geolocation data (subject to device permissions) to calculate and display distance information between users, and explicitly warns that displayed Distance Information could be used by other users to determine a user's exact location and identity....
Why it matters: This provision establishes that precise geolocation is collected and that Distance Information shared in profiles may enable third-party trilateration or inference of a user's exact location and identity; the policy discloses this risk directly and states that hiding Distance Information still results in profile sorting based on relative distance....
-
Grindr
· Grindr Privacy Policy
The policy discloses that Grindr has no EU/EEA/UK/Swiss establishments and that personal information of users in those jurisdictions is transferred to and processed in the United States and other third countries, with stated reliance on EU-U.S. Data Privacy Framework certification and Standard Contractual Clauses as transfer mechanisms....
Why it matters: This provision establishes the cross-border data transfer mechanisms Grindr relies on for GDPR-compliant transfers of personal information from the EU/EEA, UK, and Switzerland to the United States and other third countries; the absence of EU/EEA/UK/Swiss establishments means all processing is conducted from the U.S., with EDPO appointed as representative in each jurisdiction....
-
Grindr
· Grindr Privacy Policy
The policy discloses that Grindr and its partners scan, analyze, and collect information from user-uploaded videos, images, audio, messages, and other content and metadata, extracting content characteristics and attributes for recommendations, service delivery, and other operations....
Why it matters: This provision establishes that message content, images, audio, and video uploaded by users are subject to scanning and analysis by Grindr and its partners for attribute extraction and recommendation purposes; the policy states this analysis may be associated with user profiles consistent with user choices....